CVE-2015-4348

high

Description

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors.

References

https://www.drupal.org/node/2437973

http://www.securityfocus.com/bid/72805

http://www.openwall.com/lists/oss-security/2015/04/25/6

Details

Source: Mitre, NVD

Published: 2015-06-15

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6

Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00329

Detections

Analytics